$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6bea3f-85ac-4960-bee4-67731adcacb5.roa File: cc6bea3f-85ac-4960-bee4-67731adcacb5.roa (raw, json) Hash identifier: Hf/N+PWWJqByYImOpf5dgB0ikV2tCsHWO+wv93D9ddY= Subject key identifier: EA:5B:43:4F:6E:CD:6F:68:B4:96:0E:D8:BD:71:43:B8:2A:98:7E:DC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 620F3167F26EDD3C6BE98C807313121EBE64F711 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6bea3f-85ac-4960-bee4-67731adcacb5.roa Signing time: Fri 22 Sep 2023 00:00:00 +0000 ROA not before: Fri 22 Sep 2023 00:00:00 +0000 ROA not after: Fri 27 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 99.82.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0f:31:67:f2:6e:dd:3c:6b:e9:8c:80:73:13:12:1e:be:64:f7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 22 00:00:00 2023 GMT Not After : Oct 27 23:59:59 2023 GMT Subject: serialNumber=5d57afe33095f638b16753d1d43808eec0f5556ea0d908bda9cbfa580b9b4035, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:6a:51:1d:c8:fc:42:15:11:94:a0:72:d7: 14:6d:bd:ce:76:b3:ef:2a:64:ce:aa:8b:92:fc:4e: 14:81:1c:06:eb:3d:b1:d8:8f:06:64:d6:59:19:ba: af:e9:59:7f:93:36:e6:b8:b9:56:0e:56:5e:4e:92: 98:b0:02:19:4f:00:24:d3:db:b9:01:72:d8:b8:5f: ab:41:a4:6d:85:b8:ce:88:1a:ce:c1:c1:82:e1:91: ef:96:af:75:94:31:6f:dd:92:ad:f5:34:f1:f2:95: dd:1f:6a:a2:9a:00:7c:18:b9:cb:a8:67:e2:9b:11: 55:a6:a6:8f:ba:1b:1f:a8:fd:2d:c6:79:1c:8f:14: d9:d5:e8:1b:3c:bb:9c:a0:7e:02:00:07:87:6d:95: fa:45:29:75:0b:e8:8d:a3:77:9a:66:c3:0c:97:ef: d4:66:15:cf:95:17:50:89:ea:0c:90:ad:71:5c:ea: 7d:d5:25:d8:ca:6e:ba:95:0c:e7:cd:54:5d:ce:29: 18:22:01:bc:76:ea:64:00:6e:71:32:fa:41:9e:97: 25:f6:b1:0c:ae:f1:9b:65:c2:bb:08:ca:d8:65:94: 2d:ea:c1:8e:14:58:f1:52:70:bf:df:a3:ec:bd:9f: 2f:f5:e0:8c:2f:5a:7b:68:1f:42:d2:8e:88:72:a1: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5B:43:4F:6E:CD:6F:68:B4:96:0E:D8:BD:71:43:B8:2A:98:7E:DC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc6bea3f-85ac-4960-bee4-67731adcacb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.82.171.0/24 Signature Algorithm: sha256WithRSAEncryption a8:f4:3c:f8:a8:2c:03:c5:b0:8b:66:b5:b7:2e:92:f7:f3:ef: 77:6b:1d:1b:b3:4e:40:fe:37:d4:5f:7c:c5:72:de:b5:83:5c: b2:c6:26:71:fe:58:0f:4f:ec:fc:54:7a:7c:ab:8e:41:da:69: ad:27:09:4e:66:74:21:97:1b:82:a8:1f:56:c5:9b:b7:52:cd: 3d:ad:09:0b:9b:f0:34:4f:26:3b:32:4e:81:65:6a:fe:9c:73: 9d:3c:30:c1:e6:26:71:67:2d:ba:a2:c1:2b:e3:13:de:a3:9a: 94:35:40:d9:ee:22:74:ba:4f:e2:95:ab:f7:e8:05:3e:50:bd: 02:0c:9d:0c:f7:f4:0e:65:55:3f:4d:43:44:67:e6:5b:37:07: 8a:6a:5d:ff:af:fd:40:e3:e9:8b:7a:22:d1:c8:33:b2:4e:1b: 89:5f:95:4f:0f:56:05:07:61:5f:d1:4f:55:37:ec:7e:88:26: 2f:01:cf:ef:c9:bd:cf:0d:2a:21:6b:7c:12:c6:1d:c0:65:08: fc:c3:4c:6d:68:78:1f:0e:18:cc:66:e4:65:9d:0d:76:1e:8c: e0:cd:fa:6a:b4:c7:85:05:e7:07:2d:f6:d8:f0:28:b4:f0:b5: 33:8d:7b:2c:d2:2a:fb:c0:dc:ff:7e:89:f0:01:da:8e:15:5e: af:ac:96:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYg8xZ/Ju3Txr6YyAcxMSHr5k9xEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIyMDAwMDAwWhcNMjMxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZDU3YWZlMzMwOTVmNjM4YjE2NzUzZDFkNDM4MDhlZWMw ZjU1NTZlYTBkOTA4YmRhOWNiZmE1ODBiOWI0MDM1MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjGmpRHcj8QhURlKBy1xRtvc52s+8qZM6qi5L8ThSBHAbr PbHYjwZk1lkZuq/pWX+TNua4uVYOVl5OkpiwAhlPACTT27kBcti4X6tBpG2FuM6I Gs7BwYLhke+Wr3WUMW/dkq31NPHyld0faqKaAHwYucuoZ+KbEVWmpo+6Gx+o/S3G eRyPFNnV6Bs8u5ygfgIAB4dtlfpFKXUL6I2jd5pmwwyX79RmFc+VF1CJ6gyQrXFc 6n3VJdjKbrqVDOfNVF3OKRgiAbx26mQAbnEy+kGelyX2sQyu8ZtlwrsIythllC3q wY4UWPFScL/fo+y9ny/14IwvWntoH0LSjohyoQddAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6ltDT27Nb2i0lg7YvXFDuCqYftwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2NjNmJlYTNmLTg1YWMtNDk2MC1iZWU0LTY3NzMxYWRjYWNiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABjUqswDQYJKoZIhvcNAQELBQADggEBAKj0PPioLAPFsItmtbcukvfz73dr HRuzTkD+N9RffMVy3rWDXLLGJnH+WA9P7PxUenyrjkHaaa0nCU5mdCGXG4KoH1bF m7dSzT2tCQub8DRPJjsyToFlav6cc508MMHmJnFnLbqiwSvjE96jmpQ1QNnuInS6 T+KVq/foBT5QvQIMnQz39A5lVT9NQ0Rn5ls3B4pqXf+v/UDj6Yt6ItHIM7JOG4lf lU8PVgUHYV/RT1U37H6IJi8Bz+/Jvc8NKiFrfBLGHcBlCPzDTG1oeB8OGMxm5GWd DXYejODN+mq0x4UF5wct9tjwKLTwtTONeyzSKvvA3P9+ifAB2o4VXq+sltw= -----END CERTIFICATE-----Generated at Fri Sep 22 19:21:58 2023 by rpki-client on console-ams.rpki-client.org